Security Bypass Vulnerability in Apple iPhone/iPad/iPod touch versions earlier than iOS 6.1

Release date:
Updated on: 2013-01-31

Affected Systems:
Apple iPhone 4.x
Apple iPhone 3.x
Apple iOS 3.x
Apple iOS 2.x
Apple TV 5.x
Apple TV 4.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57598
CVE (CAN) ID: CVE-2013-0963
 
Apple iOS is an operating system developed by Apple.

The authentication service of Apple iOS has error handling. When your AppleID certificate fails to be verified, your AppleID is assumed to be a null string. When multiple systems belonging to different users enter this status, applications that rely on this authentication method will generate authentication errors.
 
<* Source: Apple

Link: https://support.apple.com/kb/HT5642? Utm_source = feedburner & utm_medium = feed & utm_campaign = Feed % 3A + Cooln
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Apple
-----
Apple has released a Security Bulletin (HT5642) and corresponding patches for this:
HT5642: About the security content of iOS 6.1 Software Update
Link: https://support.apple.com/kb/HT5642? Utm_source = feedburner & utm_medium = feed & utm_campaign = Feed % 3A + Cooln